Security Advisory

CVE-2026-33177

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-20 21:41:36

Last updated 2026-03-23 16:49:26

Assigner GitHub_M

CVSS score 4.3

State PUBLISHED

Description

Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.14 and 6.7.0, low-privileged Control Panel users could create taxonomy terms by submitting requests to the field action processing endpoint with attacker-controlled field definitions. This bypasses the authorization checks enforced on the standard taxonomy term creation endpoint. This has been fixed in 5.73.14 and 6.7.0.

← Browse all CVEs View on cve.org ↗